Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qUooWMfK-pJ0riKWJeI6H7tsSD8.roa
File: qUooWMfK-pJ0riKWJeI6H7tsSD8.roa (raw, json)
Hash identifier: p36h5ZeYcgu4mV122GMtau3Y5RLicuGyzCnBcREFulc=
Subject key identifier: A9:4A:28:58:C7:CA:FA:92:74:AE:22:96:25:E2:3A:1F:BB:6C:48:3F
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E35DC767687909AE4281BF010364
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qUooWMfK-pJ0riKWJeI6H7tsSD8.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210636
IP address blocks: 193.228.224.0/24 maxlen: 24
185.89.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e3:5d:c7:67:68:79:09:ae:42:81:bf:01:03:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a94a2858c7cafa9274ae229625e23a1fbb6c483f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:4a:de:f1:cf:d8:a8:d0:5d:6f:4e:82:0c:
3b:c2:4d:ee:c9:6e:36:89:31:57:36:ad:c2:25:42:
f7:cc:99:87:a7:af:c4:62:93:9d:b8:d0:62:a8:d2:
25:85:56:59:10:01:76:e1:b4:de:45:27:84:57:24:
0e:ce:38:db:7f:13:14:54:1b:cf:6d:aa:5c:68:0f:
07:41:ad:a6:34:b9:fc:a5:57:f5:14:db:52:88:24:
0d:27:7a:83:79:30:aa:3e:ff:ed:fc:ac:ca:ba:91:
58:80:0c:c6:9b:a4:89:dc:8a:c6:9c:a1:90:aa:3f:
87:7d:c9:2f:00:e7:15:66:ac:0c:7f:c4:1b:a8:3f:
c1:cc:79:5e:be:e5:75:d4:cb:d6:47:76:46:6c:16:
d9:97:e7:28:99:77:cb:3a:9e:8a:7c:3c:3a:55:87:
17:16:81:6d:09:90:1f:9c:f5:28:73:52:ec:82:9f:
aa:47:d3:99:c6:79:dc:cc:f3:c7:eb:8d:be:d8:cb:
f3:fd:9d:05:6a:e9:df:08:e8:a8:b7:f9:4b:f6:6d:
67:e3:eb:b4:c8:10:da:ac:0e:4f:17:2a:ea:ba:5f:
a4:1d:92:74:2a:37:84:0a:5c:93:5a:ae:67:fc:94:
22:1f:b8:2e:21:b2:38:95:71:d2:5f:e0:77:c8:c8:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:28:58:C7:CA:FA:92:74:AE:22:96:25:E2:3A:1F:BB:6C:48:3F
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/qUooWMfK-pJ0riKWJeI6H7tsSD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.249.0/24
193.228.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:36:e3:ab:9e:0d:9c:ca:1f:a3:42:17:b3:bc:a3:f8:40:61:
79:c6:1c:a1:3a:65:05:26:8d:5b:6d:3d:64:ee:44:48:85:60:
75:c1:38:82:a3:cb:9d:9f:d5:d8:cf:0e:e7:3c:50:57:bf:fd:
37:d2:88:58:31:5e:98:74:b1:f3:8d:c8:c2:4e:f1:95:b3:ed:
a2:18:b4:8b:77:1c:40:7a:eb:85:c2:cb:69:90:96:0f:d7:12:
3c:6a:9c:ca:ae:85:eb:25:a0:ee:80:b4:16:17:9b:a0:f3:98:
d6:84:4e:09:5d:0c:09:f8:ff:53:fe:23:c9:fd:cc:1d:2e:6e:
d9:72:cb:05:1b:0c:05:7c:4a:f9:4a:3e:36:32:2d:d9:22:5d:
99:0f:b4:a2:3d:80:57:a5:14:e1:de:56:ca:6e:83:8e:78:02:
01:59:be:7b:05:6e:6e:d0:c9:8a:d0:0f:94:c5:ea:cb:72:54:
20:90:63:5d:4b:1b:b7:bb:ed:a1:5c:94:bd:c5:80:a0:40:a7:
74:c1:c4:b7:d7:d4:e4:df:3f:6b:eb:57:e1:eb:e3:11:df:8a:
33:16:7a:c8:75:c2:83:50:d0:80:ee:fd:a0:a1:c1:57:f9:58:
39:de:b2:c3:7b:7d:d7:54:db:4a:b9:f8:7a:ce:9a:4e:0e:92:
f9:0f:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:12:29 2024 by rpki-client on console-fra.rpki-client.org